Commit graph

1929 commits

Author SHA1 Message Date
Tim Lee
a6a9a2e1c2
no team software gitops (#20847)
#20464 

Adding gitops support for a top level `software` key to be used to
manage installable software into "no team".

- [ ] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [X] Added/updated tests
- [X] Manual QA for all new/changed functionality

---------

Co-authored-by: Victor Lyuboslavsky <victor.lyuboslavsky@gmail.com>
2024-08-05 14:39:10 -03:00
Ian Littman
8362c328a1
Fix grammar on load balancer documentation in deploy docs (#21032)
Checklist deleted as items are irrlevant for docs updates.
2024-08-05 11:23:26 -05:00
Eric
1517b285ec
Docs: Add fleetdm.com/guides link to tutorials-and-guides docs page. (#21026)
Related to: https://github.com/fleetdm/confidential/issues/7343

Changes:
- Added a fleetdm.com/guides link to the tutorials and guides docs page.
2024-08-02 18:35:23 -05:00
Noah Talerman
0f41fc1a8d
API design: Hide "Self-service" if there's no self-service software (#20908) 2024-08-02 12:49:20 -07:00
Noah Talerman
a28e4d800b
Supported operating systems docs (#20679)
- Google Chrome and a gnome extension have to
be installed to use Fleet Desktop + Firefox on Fedora.
- You don't have to set Google Chrome as the default browser.
2024-08-01 13:43:07 -04:00
Marko Lisica
5820d028e0
API design: Improve host identifiers in the docs, CLI and API (#19752)
API design for: #19127
2024-08-01 11:11:07 -04:00
Georg Schölly
a41fb636bc
Detect software from deb_packages which is 'on hold' (#20751)
The list of installed software was missing packages put ['on
hold'](https://askubuntu.com/questions/18654/how-to-prevent-updating-of-a-specific-package)

The reason for this is that the old query looks for the status

    install ok installed

but there are other valid status which are also installed, like `hold ok
installed`. The syntax is `<desired> <error> <status>` so we only need
to look at the last or two last parts and ignore the first one.

See https://man7.org/linux/man-pages/man1/dpkg-query.1.html for a list
of status.

# Checklist for submitter

- [X] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [X] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
2024-08-01 11:39:01 -03:00
Grant Bilstad
8b5094ff37
Fix link for fleetctl install (#20835) 2024-07-31 16:10:46 -06:00
Roberto Dip
42ff57d059
UI/Docs changes to rotate keys using Escrow Buddy (#20843)
UI portion for #13157

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality
2024-07-31 16:49:24 -03:00
Victor Lyuboslavsky
31224ccd34
Added VPP support for iOS/iPadOS (#20837)
#19447 
iOS and iPadOS apps can be installed using Apple's VPP (Volume Purchase
Program)

VPP apps are now using a composite primary key (Adam ID and platform)
because we want to keep iOS/iPadOS/macOS separate. It is possible for
one app to be installable on all Apple platforms.

# Checklist for submitter

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [x] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [x] Added/updated tests
- [x] If database migrations are included, checked table schema to
confirm autoupdate
- For database migrations:
- [x] Checked schema for all modified table for columns that will
auto-update timestamps during migration.
- [x] Confirmed that updating the timestamps is acceptable, and will not
cause unwanted side effects.
- [x] Ensured the correct collation is explicitly set for character
columns (`COLLATE utf8mb4_unicode_ci`).
- [x] Manual QA for all new/changed functionality
2024-07-30 22:43:51 +02:00
Marko Lisica
bec4072ca7
GitOps docs: Configuration profiles - target hosts by excluding any label (#20779)
Changes related to: #17315
2024-07-30 09:13:02 -04:00
Noah Talerman
935f489397
Guide and API reference: Show iOS & iPadOS as supported platforms in the UI (#20746)
Guide and API reference changes for the following story:
- #19319
2024-07-26 16:04:35 -04:00
Marko Lisica
36c1b918d3
API design: Scope configuration profiles to hosts by excluding any label (#20614)
API design for:  #17315

Old PR: #18844

---------

Co-authored-by: Noah Talerman <47070608+noahtalerman@users.noreply.github.com>
2024-07-26 12:32:02 +02:00
Noah Talerman
b77f9070be
API design: Add host's next scheduled maintenance window to "Get host" (#20745)
API changes for the following story:
- #18554
2024-07-25 18:28:24 -04:00
Noah Talerman
7195126ce6
API reference: Wipe iOS/iPadOS (#20766) 2024-07-25 15:26:13 -07:00
Marko Lisica
7ff93583e8
API changes: Increase timeout limit for scripts (#20650)
API changes for:  #16645
2024-07-25 18:25:48 -04:00
Noah Talerman
0a37118660
API design: Filters for fleetctl get mdm-commands (#20623)
API design for:
-  #19143
2024-07-25 18:13:49 -04:00
Marko Lisica
5b88c7d754
Agent configuration docs: Increase timeout limit for scripts (#20651)
Docs changes related to: #16645
2024-07-25 16:56:36 -04:00
Jahziel Villasana-Espinoza
6a31d4eb44
feat: Apple App Store (VPP) apps (#20643)
> Related issue: #18867

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [x] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [x] Added/updated tests
- [x] If database migrations are included, checked table schema to
confirm autoupdate
- [x] Manual QA for all new/changed functionality
2024-07-25 12:52:49 -04:00
Noah Talerman
316de4b15f
GitOps reference (#20681)
- Clarify how to edit a team name via GitOps

Story: #18471
2024-07-25 12:19:42 -04:00
Dale Ribeiro
67852a0280
added link to available options for update channels (#20529)
# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [ ] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [ ] Added/updated tests
- [ ] If database migrations are included, checked table schema to
confirm autoupdate
- For database migrations:
- [ ] Checked schema for all modified table for columns that will
auto-update timestamps during migration.
- [ ] Confirmed that updating the timestamps is acceptable, and will not
cause unwanted side effects.
- [ ] Ensured the correct collation is explicitly set for character
columns (`COLLATE utf8mb4_unicode_ci`).
- [ ] Manual QA for all new/changed functionality
- For Orbit and Fleet Desktop changes:
- [ ] Orbit runs on macOS, Linux and Windows. Check if the orbit
feature/bugfix should only apply to one platform (`runtime.GOOS`).
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
2024-07-25 10:04:37 -04:00
Dale Ribeiro
2481849669
Updated broken links for Using Fleet and Deploying (#20655)
# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [ ] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [ ] Added/updated tests
- [ ] If database migrations are included, checked table schema to
confirm autoupdate
- For database migrations:
- [ ] Checked schema for all modified table for columns that will
auto-update timestamps during migration.
- [ ] Confirmed that updating the timestamps is acceptable, and will not
cause unwanted side effects.
- [ ] Ensured the correct collation is explicitly set for character
columns (`COLLATE utf8mb4_unicode_ci`).
- [ ] Manual QA for all new/changed functionality
- For Orbit and Fleet Desktop changes:
- [ ] Orbit runs on macOS, Linux and Windows. Check if the orbit
feature/bugfix should only apply to one platform (`runtime.GOOS`).
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
2024-07-25 10:04:18 -04:00
Marko Lisica
e385f2c75a
Mark software API endpoints as experimental (#20658)
- Mark new API endpoints or API endpoints that were changed as part of
Fleet's first app management feature (#14921) as experimental.
- Call out what is experimental exactly (the endpoint or new keys/values) and
point to changes
2024-07-24 18:35:57 -04:00
Jahziel Villasana-Espinoza
5b97d01982 chore: merge main 2024-07-24 16:50:43 -04:00
Noah Talerman
6f45ff4e5a
Usage stats reference docs: Add items (#20666)
We forgot to document the items we added as part of this
PR:
- https://github.com/fleetdm/fleet/pull/19078
2024-07-24 14:07:46 -04:00
Lucas Manuel Rodriguez
70d4558448
Backend support for iOS/iPadOS OS updates (#20649)
#20469 and #20471

- [X] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [X] Added/updated tests
- [X] Manual QA for all new/changed functionality
2024-07-24 14:34:23 -03:00
Gabriel Hernandez
3f5fd7f9f5 merge branch 'main' into feat-vpp-apps-18867 2024-07-24 12:10:48 +01:00
Grant Bilstad
ad9e93020e
Update FAQ Deploying section (#20669)
Updating FAQ section with new deploy information.
2024-07-23 15:17:47 -06:00
Jahziel Villasana-Espinoza
e3e7b6a115 chore: merge main 2024-07-22 17:25:42 -04:00
Dante Catalfamo
5e1a3d03ae
MySQL 8.0 Migration (#20225)
#17249
2024-07-22 16:27:36 -04:00
Noah Talerman
5a45411e59
Permissions changes for #19055 (#20624)
Global observer/+ can no longer run saved scripts.

---------

Co-authored-by: Rachael Shaw <r@rachael.wtf>
2024-07-22 11:41:16 -05:00
Benjamin Edwards
e52f6c8291
update GCP terraform code to be compatible with software installers updates (#20585) 2024-07-22 11:23:44 -04:00
Gabriel Hernandez
446abc2dbc Merge branch 'main' into feat-vpp-apps-18867 2024-07-22 11:46:14 +01:00
Grant Bilstad
0cb1e23483
Bug with spec/syntax for agent options GitOps (#20508) 2024-07-19 15:57:03 -06:00
Noah Talerman
3126c05e7a
GitOps docs: Install software (#20502)
- Update GitOps reference to cover the following user stories:
  - #14921 (4.50)
  - #18867 (4.55)
  - #19447 (4.56)
  - #19550 (4.56)
2024-07-19 12:00:47 -07:00
Gabriel Hernandez
b5f64b7d95 Merge branch 'main' into feat-vpp-apps-18867 2024-07-19 14:33:56 +01:00
Noah Talerman
a3eda1cfce
Docs: Fix broken anchor link (#20507) 2024-07-18 16:12:57 -07:00
Sarah Gillespie
f5296ab400
Fix unreleased issues in VPP feature branch (#20590) 2024-07-18 17:39:19 -05:00
Mike Thomas
c5657016c6
Update FAQ.md (#20492)
Added a comment to let folks know why a bunch of questions are hidden.
Closes https://github.com/fleetdm/confidential/issues/7109

---------

Co-authored-by: Eric <eashaw@sailsjs.com>
2024-07-17 16:26:15 -05:00
Austin Culter
137f58eae3
Minor Fix Fleet Server Configuration Docs Markdown Docs (#20498)
- Removes _"Optional unique identifier that can be used by the principal
assuming the role to assert its identity."_ text as it:
1. Is (possibly?) duplicative of _"AWS STS External ID to use for
Firehose authentication. This is typically used in conjunction with an
STS role ARN to ensure that only the intended AWS account can assume the
role."_
2. Seems ill-placed (even if it should persist, if should probably be
nested under the [`firehose​_sts​_external​_id`
heading](https://fleetdm.com/docs/configuration/fleet-server-configuration#firehose-sts-external-id))
- Fixes markdown formatting on `firehose_sts_assume_role_arn` by adding
another newline char so the resulting HTML gets properly rendered (as an
`<h5>`) _outside the `<ul>` tag:_

![image](https://github.com/user-attachments/assets/ace319f7-a2ac-4a6b-93d7-ef19414e2c46)

Currently looks like this on [Fleet Server Configuration
page](https://fleetdm.com/docs/configuration/fleet-server-configuration):

![image](https://github.com/user-attachments/assets/95114996-41af-4ea8-9cc5-677b49fdcf84)

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

(None of the checklist items applied to this change.
2024-07-17 16:51:38 -04:00
Jahziel Villasana-Espinoza
5d2e40bc8b
feat: backend for VPP related global activities (#20484)
> Related issue: #19870 

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality
2024-07-16 10:51:08 -04:00
Rachael Shaw
e4044c5d63
Documentation for query_report_cap config (#20414)
- Add documentation for the `query_report_cap` config option. For #19600
2024-07-15 14:10:34 -04:00
James Kane
4e0c447daa
Add "exclude software" parameter to get host by identifier (#20133)
For #19540

Just added the same "exclude_software" functionality that exists in "get
hosts" to the "get host by identifier" function.

- [ ] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [ ] Manual QA for all new/changed functionality
2024-07-11 15:48:15 -05:00
Tim Lee
32176ef286
Ubuntu Kernel Vuln Docs (#20125)
Doc updates

---------

Co-authored-by: Noah Talerman <47070608+noahtalerman@users.noreply.github.com>
Co-authored-by: Noah Talerman <noahtal@umich.edu>
Co-authored-by: Rachael Shaw <r@rachael.wtf>
2024-07-11 10:40:44 -05:00
Rachael Shaw
50a967bb53
Fix link to GitOps docs (#20365) 2024-07-10 17:08:06 -05:00
Eric
6b87d83207
Update commented out line on segment-hosts docs page (#20361)
Changes:
- Updated the commented out bullet point in the segment hosts page to
fix a rendering issue on fleetdm.com
2024-07-10 16:43:06 -05:00
Noah Talerman
fc12b24851
Update best practice teams (#20290)
- Add "Company-owned iPhones" and "Company-owned iPads"
- "BYOD iPhones" coming soon
2024-07-10 16:32:57 -04:00
Tim Lee
812140a760
Add createdAt to Vulnerability responses (#20019) 2024-07-09 11:09:16 -06:00
Lucas Manuel Rodriguez
2875a9dbb8
Fixes to fleetctl debug connection and TLS certs documentation (#20166)
#6085

- [X] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [X] Added/updated tests
- [x] Manual QA for all new/changed functionality
2024-07-09 14:04:23 -03:00
Marko Lisica
055145b7d3
API design: Software self-service (#20223)
API design for:
- #17587

---------

Co-authored-by: Rachael Shaw <r@rachael.wtf>
Co-authored-by: Noah Talerman <47070608+noahtalerman@users.noreply.github.com>
Co-authored-by: Martin Angers <martin.n.angers@gmail.com>
2024-07-09 18:23:44 +02:00